Hi Debian,

just a quick note that GNU Chess 6.2.8 is vulnerable too (and that I'm
in touch with NVD to mark 8.2.8 as vulnerable in NVD).

This is the patch for CVE-2021-30184 for both GNU Chess 6.2.7 and 6.2.8
that I derived from Michael Vaughan's prior work for Gentoo, earlier today:
https://github.com/gentoo/gentoo/blob/master/games-board/gnuchess/files/gnuchess-6.2.8-cve-2021-30184.patch

Additional review is welcome.

Best



Sebastian

Reply via email to